christoph/fail
1
Fork 0
Code Actions Packages Releases Activity

wmoo: 1 job = 8 experiments (all bit positions for one address)

Browse Source 
git-svn-id: https://www4.informatik.uni-erlangen.de/i4svn/danceos/trunk/devel/fail@1098 8c4709b5-6ec9-48aa-a5cd-a96041d1645a
This commit is contained in:
hsc
2012-04-18 12:36:44 +00:00
parent 1027b9faf2
commit 63add607a0
2 changed files with 132 additions and 111 deletions
Download Patch File Download Diff File Expand all files Collapse all files

190
core/experiments/weathermonitor/experiment.cc
View File

@ -59,6 +59,8 @@ bool WeathermonitorExperiment::run()
log << "enabling tracing" << endl; log << "enabling tracing" << endl;
TracingPlugin tp; TracingPlugin tp;
// TODO: record max(ESP)
// restrict memory access logging to injection target // restrict memory access logging to injection target
MemoryMap mm; MemoryMap mm;
mm.add(WEATHER_DATA_START, WEATHER_DATA_END - WEATHER_DATA_START); mm.add(WEATHER_DATA_START, WEATHER_DATA_END - WEATHER_DATA_START);
@ -123,125 +125,131 @@ bool WeathermonitorExperiment::run()
param.msg.set_instr_offset(1000); param.msg.set_instr_offset(1000);
//param.msg.set_instr_address(12345); //param.msg.set_instr_address(12345);
param.msg.set_mem_addr(0x00103bdc); param.msg.set_mem_addr(0x00103bdc);
param.msg.set_bit_offset(5);
#endif #endif
int id = param.getWorkloadID(); int id = param.getWorkloadID();
int instr_offset = param.msg.instr_offset(); int instr_offset = param.msg.instr_offset();
int mem_addr = param.msg.mem_addr(); int mem_addr = param.msg.mem_addr();
int bit_offset = param.msg.bit_offset();
log << "job " << id << " instr " << instr_offset << " mem " << mem_addr << "+" << bit_offset << endl;
// XXX debug // for each job we're actually doing *8* experiments (one for each bit)
for (int bit_offset = 0; bit_offset < 8; ++bit_offset) {
WeathermonitorProtoMsg_Result *result = param.msg.add_result();
result->set_bit_offset(bit_offset);
log << std::dec << "job " << id << " instr " << instr_offset
<< " mem " << mem_addr << "+" << bit_offset << endl;
// XXX debug
/* /*
std::stringstream fname; std::stringstream fname;
fname << "job." << ::getpid(); fname << "job." << ::getpid();
std::ofstream job(fname.str().c_str()); std::ofstream job(fname.str().c_str());
job << "job " << id << " instr " << instr_offset << " (" << param.msg.instr_address() << ") mem " << mem_addr << "+" << bit_offset << endl; job << "job " << id << " instr " << instr_offset << " (" << param.msg.instr_address() << ") mem " << mem_addr << "+" << bit_offset << endl;
job.close(); job.close();
*/ */
// this marks THE END // this marks THE END
fi::BPEvent ev_end(fi::ANY_ADDR); fi::BPEvent ev_end(fi::ANY_ADDR);
ev_end.setCounter(WEATHER_NUMINSTR); ev_end.setCounter(WEATHER_NUMINSTR);
sal::simulator.addEvent(&ev_end); sal::simulator.addEvent(&ev_end);
// no need to wait if offset is 0 // no need to wait if offset is 0
if (instr_offset > 0) { if (instr_offset > 0) {
// XXX could be improved with intermediate states (reducing runtime until injection) // XXX could be improved with intermediate states (reducing runtime until injection)
bp.setWatchInstructionPointer(fi::ANY_ADDR); bp.setWatchInstructionPointer(fi::ANY_ADDR);
bp.setCounter(instr_offset); bp.setCounter(instr_offset);
sal::simulator.addEventAndWait(&bp); sal::simulator.addEventAndWait(&bp);
} }
// --- fault injection --- // --- fault injection ---
sal::MemoryManager& mm = sal::simulator.getMemoryManager(); sal::MemoryManager& mm = sal::simulator.getMemoryManager();
sal::byte_t data = mm.getByte(mem_addr); sal::byte_t data = mm.getByte(mem_addr);
sal::byte_t newdata = data ^ (1 << bit_offset); sal::byte_t newdata = data ^ (1 << bit_offset);
mm.setByte(mem_addr, newdata); mm.setByte(mem_addr, newdata);
// note at what IP we did it // note at what IP we did it
int32_t injection_ip = sal::simulator.getRegisterManager().getInstructionPointer(); int32_t injection_ip = sal::simulator.getRegisterManager().getInstructionPointer();
param.msg.set_injection_ip(injection_ip); param.msg.set_injection_ip(injection_ip);
log << "fault injected @ ip " << injection_ip log << "fault injected @ ip " << injection_ip
<< " 0x" << std::hex << ((int)data) << " -> 0x" << ((int)newdata) << endl; << " 0x" << std::hex << ((int)data) << " -> 0x" << ((int)newdata) << endl;
// sanity check // sanity check
if (param.msg.has_instr_address() && if (param.msg.has_instr_address() &&
injection_ip != param.msg.instr_address()) { injection_ip != param.msg.instr_address()) {
std::stringstream ss; std::stringstream ss;
ss << "SANITY CHECK FAILED: " << injection_ip ss << "SANITY CHECK FAILED: " << injection_ip
<< " != " << param.msg.instr_address(); << " != " << param.msg.instr_address();
log << ss.str() << endl; log << ss.str() << endl;
param.msg.set_resulttype(param.msg.UNKNOWN); result->set_resulttype(result->UNKNOWN);
param.msg.set_latest_ip(injection_ip); result->set_latest_ip(injection_ip);
param.msg.set_details(ss.str()); result->set_details(ss.str());
result->set_num_iterations(666); // FIXME
sal::simulator.clearEvents(); sal::simulator.clearEvents();
#if !LOCAL continue;
m_jc.sendResult(param); }
continue;
#endif
}
// --- aftermath --- // --- aftermath ---
// four possible outcomes: // possible outcomes:
// - trap, "crash" // - trap, "crash"
// - jump outside text segment // - jump outside text segment
// - (XXX unaligned jump inside text segment) // - (XXX unaligned jump inside text segment)
// - (XXX weird instructions?) // - (XXX weird instructions?)
// - (XXX results displayed?) // - (XXX results displayed?)
// - reaches THE END // - reaches THE END
// additional info:
// - (XXX #loop iterations?)
// - (XXX "sane" display?)
// catch traps as "extraordinary" ending // catch traps as "extraordinary" ending
fi::TrapEvent ev_trap(fi::ANY_TRAP); fi::TrapEvent ev_trap(fi::ANY_TRAP);
sal::simulator.addEvent(&ev_trap); sal::simulator.addEvent(&ev_trap);
// jump outside text segment // jump outside text segment
fi::BPRangeEvent ev_below_text(fi::ANY_ADDR, WEATHER_TEXT_START - 1); fi::BPRangeEvent ev_below_text(fi::ANY_ADDR, WEATHER_TEXT_START - 1);
fi::BPRangeEvent ev_beyond_text(WEATHER_TEXT_END + 1, fi::ANY_ADDR); fi::BPRangeEvent ev_beyond_text(WEATHER_TEXT_END + 1, fi::ANY_ADDR);
sal::simulator.addEvent(&ev_below_text); sal::simulator.addEvent(&ev_below_text);
sal::simulator.addEvent(&ev_beyond_text); sal::simulator.addEvent(&ev_beyond_text);
#if LOCAL && 0 #if LOCAL && 0
// XXX debug // XXX debug
log << "enabling tracing" << endl; log << "enabling tracing" << endl;
TracingPlugin tp; TracingPlugin tp;
tp.setLogIPOnly(true); tp.setLogIPOnly(true);
tp.setOstream(&std::cout); tp.setOstream(&std::cout);
// this must be done *after* configuring the plugin: // this must be done *after* configuring the plugin:
sal::simulator.addFlow(&tp); sal::simulator.addFlow(&tp);
#endif #endif
fi::BaseEvent* ev = sal::simulator.waitAny(); fi::BaseEvent* ev = sal::simulator.waitAny();
// record latest IP regardless of result // record latest IP regardless of result
param.msg.set_latest_ip(sal::simulator.getRegisterManager().getInstructionPointer()); result->set_latest_ip(sal::simulator.getRegisterManager().getInstructionPointer());
if (ev == &ev_end) { if (ev == &ev_end) {
log << "Result FINISHED" << endl; log << "Result FINISHED" << endl;
param.msg.set_resulttype(param.msg.FINISHED); result->set_resulttype(result->FINISHED);
} else if (ev == &ev_below_text || ev == &ev_beyond_text) { } else if (ev == &ev_below_text || ev == &ev_beyond_text) {
log << "Result OUTSIDE" << endl; log << "Result OUTSIDE" << endl;
param.msg.set_resulttype(param.msg.OUTSIDE); result->set_resulttype(result->OUTSIDE);
} else if (ev == &ev_trap) { } else if (ev == &ev_trap) {
log << std::dec << "Result TRAP #" << ev_trap.getTriggerNumber() << endl; log << std::dec << "Result TRAP #" << ev_trap.getTriggerNumber() << endl;
param.msg.set_resulttype(param.msg.TRAP); result->set_resulttype(result->TRAP);
std::stringstream ss; std::stringstream ss;
ss << ev_trap.getTriggerNumber(); ss << ev_trap.getTriggerNumber();
param.msg.set_details(ss.str()); result->set_details(ss.str());
} else { } else {
log << "Result WTF?" << endl; log << "Result WTF?" << endl;
param.msg.set_resulttype(param.msg.UNKNOWN); result->set_resulttype(result->UNKNOWN);
std::stringstream ss; std::stringstream ss;
ss << "eventid " << ev->getId() << " EIP " << sal::simulator.getRegisterManager().getInstructionPointer(); ss << "eventid " << ev->getId() << " EIP " << sal::simulator.getRegisterManager().getInstructionPointer();
param.msg.set_details(ss.str()); result->set_details(ss.str());
}
} }
// FIXME do we have exactly 8 results? if (param.msg.
#if !LOCAL #if !LOCAL
m_jc.sendResult(param); m_jc.sendResult(param);
} }
#endif #endif
// XXX
#endif #endif
// Explicitly terminate, or the simulator will continue to run. // Explicitly terminate, or the simulator will continue to run.

53
core/experiments/weathermonitor/weathermonitor.proto
View File

@ -1,33 +1,46 @@
message WeathermonitorProtoMsg { message WeathermonitorProtoMsg {
// Input: experiment parameters // Input: experiment parameters
// (client executes 8 experiments, one for each bit at mem_addr)
// FI at #instructions from experiment start
required int32 instr_offset = 1; required int32 instr_offset = 1;
// the exact IP value at this point in time (from golden run)
optional int32 instr_address = 2; // for sanity checks optional int32 instr_address = 2; // for sanity checks
// address of the byte to inject bit-flips
required int32 mem_addr = 3; required int32 mem_addr = 3;
required int32 bit_offset = 4;
// ---------------------------------------------------- // ----------------------------------------------------
// Output: experiment results // Output: experiment results
// (make these optional to reduce overhead for server->client communication)
// instruction pointer where injection was done // IP where we did the injection: for debugging purposes, must be identical
optional uint32 injection_ip = 5; // to instr_address
optional int32 injection_ip = 4;
// result type: repeated group Result = 5 {
// FINISHED = planned number of instructions were executed // single experiment bit offset
// TRAP = premature guest "crash" required int32 bit_offset = 1;
enum ResultType {
FINISHED = 1; // result type:
TRAP = 2; // FINISHED = planned number of instructions were executed
OUTSIDE = 3; // TRAP = premature guest "crash"
HALT = 4; // OUTSIDE = IP left text segment
UNKNOWN = 5; enum ResultType {
FINISHED = 1;
TRAP = 2;
OUTSIDE = 3;
HALT = 4;
UNKNOWN = 5;
}
required ResultType resulttype = 2;
// especially interesting for TRAP/UNKNOWN: latest IP
required uint32 latest_ip = 3;
// total number of wmoo measuring/displaying iterations seen
required uint32 num_iterations = 4;
// optional textual description of what happened
optional string details = 5;
} }
optional ResultType resulttype = 6;
// especially interesting for TRAP/UNKNOWN: latest IP
optional uint32 latest_ip = 7;
// optional textual description of what happened
optional string details = 8;
} }